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Abstract. A parametric analysis is an analysis whose input and output 
are parametrized with a number of parameters which can be instantiated 
to abstract properties after analysis is completed. This paper proposes to 
use Cousot and Cousot's Cardinal power domain to capture functional 
dependencies of analysis output on its input and obtain a parametric 

*^ , analysis by parametrizing a non-parametric base analysis. We illustrate 

the method by parametrizing a Vos based groundness analysis of logic 
programs to a parametric groundness analysis. In addition, a prototype 

I— I , implementation shows that generality of the parametric groundness anal- 

P^ • ysis comes with a negligible extra cost. 



1 Introduction 



^ I A program analysis is to infer information from programs. Let P be a program, 

^^ ' ^ express input information before analysis, and £? express output information 

vQ I inferred from P and y. We write {y,P,ff) to denote the analysis that infers 

^+ ' ^ from P and .y. A typical program analysis is non-parametric in the sense 

that the program need be analyzed separately for different input information. 
("^ ' Note that program variables are not parameters for input information, though 

r^ I input information can be thought of as predicates over program variables. Take 

the generic sorting program sort{x, y) for instance, letting nat denote the set of 
natural numbers, int the set of integers, and list{j3) the set of lists of elements 
from j3, program analyses {x S list{nat),sort{x,y),y £ list{nat)) and {x G 
. ^ list (int), sort (x,y),y g list{int)) are accomplished separately even if they are 

jrt ' two instances of a parametric analysis {x S list[f3), sort{x, y), y S list{P)) where 

both input information and output information are parametrized. By assigning 
different values to /3 which serves as a place holder for information to be filled in 
after analysis, {x G list{l3),sort{x,y),y £ list((5)) can be instantiated into many 
different non-parametric analyses such as (x € list(nat), sort(x, y),y & list(nat)) 
and {x G list{int), sort(x,y),y S list{int)). Parametric program analyses infer 
more general results, which brings some benefits. Firstly, a sub-program or a 
library program need not be analyzed separately for its different uses, i.e., the 
result of a parametric analysis is re-usable. This has positive bearing on efficiency 
of analysis because output information for different uses of the same sub-program 
can be obtained by instantiation rather than by re-analysis. Secondly, parametric 
analyses are amenable to program modifications since changes to the program 



does not necessitate re-analyses of the sub-program so long as the sub-program 
itself is not changed. 

This paper addresses the issue of lifting a non-parametric analysis to a para- 
metric analysis such that each instantiation of the result of running the para- 
metric analysis is same as the result of running the non-parametric analysis with 
instantiated input information. If {,^{(3), P, &{(3)) is the result of the parametric 
analysis then (^(k). P, 6'{k)) is the result of the non-parametric analysis for any 
possible value n for /3. Observe that both input ^(/3) and output i^(/3) of the 
parametric analysis are functions from the domain of values for parameters to 
the domain of input properties non-parametric analysis. 

The contributions of the paper are as follows. Firstly, a systematic approach 
is presented for deriving a parametric analysis from a given non-parametric 
base analysis. This involves lifting the semantic domain for the base analysis 
to its Cardinal power with respect to the domain of parameter values and lifting 
the semantic function accordingly. Secondly, this approach is applied to a goal- 
dependent groundness analysis for logic programs using parameters to express 
groimdness of variables in the top-level goal. The result is a parametric goal 
dependent groundness analysis. Thirdly, we present an encoding for the abstract 
properties and abstract operations for the parametric groundness analysis using 
positive propositional formulas. 

The next section provides background knowledge on abstract interpretation 
and logic program analysis. Section [3] describes the approach to parametrizing 
program analyses and section |4] obtains the parametric goal-dependent ground- 
ness analysis for logic programs by applying the approach. Section [5] presents the 
encoding and section [5] some experimental results with a prototype implementa- 
tion of the parametric groundness analysis. We discuss related work in section[7] 
and then conclude in section [51 

2 Preliminaries 

2.1 Abstract Interpretation 

A semantics of a program is given by an interpretation ((-D, !^d),/) where 
(-D, C^)) is a complete lattice and / is a monotone function on (-D,Ed)- The 
semantics is defined as the least fixed point Ifp / of /. The concrete seman- 
tics of the program is given by the concrete interpretation ((D, Ed)?/) while 
an abstract semantics is given by an abstract interpretation ((D", Eij); /")■ The 
correspondence between the concrete and the abstract domains is formalized 
by a Galois connection (a, 7) between (-D,Ed) and (D^E^?)- ^ Galois con- 
nection between D" and D is a pair of monotone functions a : Z? 1— >■ Z?" and 
7 : I?" i-T- Z? satisfying Vc G D.{c Qd 7 ° a(c)) and Va € D^.{a o 7(a) C^^ a). 
The function a is called an abstraction function and the function 7 a concretiza- 
tion function. A sufficient condition for Ifp/" to be a safe abstraction of Ifp / is 
Va e D''.(ao/o7(a) C^^ /»(a)) or equivalently Va e D". (/07(a) C^, 7o/f(a)), 
according to propositions 24 and 25 in [9] . In a compositional design of analy- 
sis, the concrete semantics is defined in terms of a group of semantic functions 



fi '■ Di 1-^ Ei and the abstract semantics is defined in terms of another group of 
semantic function fl : Di ^^ E^ such that each abstract semantic function f^ 
simulates its corresponding concrete semantic function fi. To prove the correct- 
ness of the abstract semantics with respect to the concrete semantics is reduced 
to proving the correctness of each abstract semantic function ff with respect 
to its corresponding concrete semantic function fi. Let 7^j : D\ \-^ Di and 

7^j : El I— >■ Ei be concretization functions. Then fl : Di n- El is correct with 

respect to f^ : D, ^ E, iff M-f^,{x^)) Eb, 7E»if!i^^)) ^r each a;« G dI 

2.2 Logic Program Analysis 

Assume a set of function symbols S and an infinite set of variables V. Let V CV. 
Then Term(Z', V) denotes the set of all terms that can be constructed from IJ 
and V. Let V(o) be the set of variables in a syntactic object o. A bold lower 
case letter denotes a sequence of different variables. When there is no ambiguity, 
V(a;) will be written as x. The set of subsets of a set S is denoted by p{S) and 
the set of finite subsets of S by pf{S). 

Substitutions A substitution 6* is a mapping from V to Term(i7,V) such that 
its domain dom{9) = {x \ x ^ (^i^)} is finite. A substitution 9 is idempotent 
iff 9{9{x)) — 9{x) for all x S V. The set of all idempotent substitutions is 
denoted Subst. A renaming substitution is a bijection from V to V. Let ^jj be 
the equivalence relation defined 9 r^jj a iff there is a renaming substitution p 
such that 9{x) — p{a{x)) for all x G C/ [T]. Let [9]u denote the equivalence 
class of 9 with respect to ^u and Substjj the quotient set of Subst with respect 
to ~[7. A substitution 9' is a canonical representative of an equivalence class 
[9]u iff 9' € [9]u and dom{9') = U &nd U f] rng{9') = where rng{9') = 
U2;gdom(6»')M^'(^))- III ^^y ^' ill W\u 1 bindings for variables outside U is irrelevant 
since {x i-^ 9'{x) \x <eU} ^u 9' . Let o Substu for any [/ C V. 

Operations on substitutions An equational constraint is a finite set (conjunction) 
of equations of the form ti = t2 with ti for i = 1, 2 being terms. Define mgu{E) 
as the ~v(£;) equivalence class of most general unifiers for i? if i^ is unifiable. 
Otherwise, mgu[E) = o. One operation performed during program execution 
is to conjoin constraints represented by substitutions. The unification operation 
: Substu X Substv >-^ SubstuDYU{o} is defined by [^i](70[^2]y = mgu{eq{9[)U 
65(^2)) where eq{9) — {x — 9{x) \ x G dom{9)} and 9'^ and ^2 are respectively 
canonical representatives of [6*1]^ and [6*2]^ such that (t/UV(6'i))n(FUV(6'2)) C 
U r\V . Another operation is projection -kx '■ Substu ^-s- Substu\x for ^ G 
p/(V) defined as nx{[9]u) = [(^]u\x- The operator ttx hides variables in X. A 
third operation is renaming defined as follows. If a; n y = then TZx->y{r]) = 
'Kx{rngu{{x = y})0ry). Otherwise, TZx^yir]) = IZz^yiTi-x^ziv)) where zr\{xU 
y U V(77)) = 0. Note that mgu{{x = y}) / o since x and y are sequences of 
different variables. TZx^y{-) transforms an equational constraint on x to one on 

y- 



Concrete and Abstract Interpretations The concrete semantics for a logic pro- 
gram analysis is usually defined in terms of several operations on the collecting 
domains nij(zn{p{Substij), C) where each U gU is the set of program variables 
of interest at a specific program point and U represents the set of program points 
of interest. The concrete interpretation is 

I = {nueu{p{Substu),C,U),Q\n*^^y,TT*x) 

where U is the set union and 0*, T^^n-s-y a-nd tt^ are set extensions of 0, TZ^^y and 
TTx respectively. An analysis is obtained by designing an abstract interpretation 

such that {ASubjj, C^, Lr^j) is related to (p{Substir), C, U) with a Galois connec- 
tion {p{Subst(j),au,ASubjj,ju) and Q^Ti-x^y and n^^ approximate correctly 
Q*,TZx^y and n^ respectively. 

3 Parametrizing Program Analyses 

An analysis {J^,P, G) computes 6 as the limit of an ultimately stationary se- 
quence of iterates: J , /(-^), • • • , /^'^H-'^)i ' ' ' where / is a monotone semantic 
function. The iteration of / is defined 

/(") = id 
;(A+i)^;„;(A) 

/('^) = U^<a/*'^ when A is a limit ordinal 

The limit is denoted Ifpj? /. As an example, consider the forward collecting 
semantics which characterizes the set of the program states 6 that can be reached 
from a set of initial states J . According to proposition 33 in [5j, ^ = Ifp© F\P\ 

where F|P](Ar) = ^ Upost[ — >]X and — > is the transition relation between 
program states and post[t]S — {s' \ 3s G S.{s,s') G t}. It is easy to verify that 

ff = Ifp^ \X.{XUpost[-^]X). 

3.1 Lifting Semantic Domains to Cardinal Power Domains 

The cardinal power Li — > L2 with base L2 and exponent Li consists of all 
monotone functions from Li to L2. We parametrize a base analysis by lifting 
both the concrete and the abstract domains to cardinal powers. 

Proposition 1. JW^I Let (Li, ai,L*,7i) and {L2,a2,L\,^2) be Galois connec- 
tions. Then (Li — > L2, a, Li — > i', 7) is a Galois connection where a = X(j).a20 

4> o ji and 7 = Xip.^2 o ip o ai. 

Proof. For any G ii — > L2, (f) E ^2°OL2°4'°li°oti != 7° ol{4') since 7.; o m are 
extensive for i = 1,2. For any ip G L^ — > ij, ao'^[ip) — 02 072 of/joai 07]^ C ip 
since ai o 7^ are reductive for i = 1,2. Since 7 o a is extensive and a o 7 is 
reductive, {Li — > L2,a,L\ — ^ I^il) is a Galois connection. D 



3.2 Lifting Semantic Functions 

The domain of an interpretation is often formed from a number of primitive 
domains and the semantic function from a number of primitive functions between 
primitive domains. We now define a family of operators *l that lift a monotone 
function / : D — > E to a, monotone function *l/ : [L — > D) — > {L — > E). 

Definition 1. Let f : D ^ E. Define i^Lf : (L ^ D) ^ {L ^ E) as 

*Lf = A0./ o 



The following theorem shows that lifting of the semantic function of an inter- 
pretation can be accomplished by lifting individual primitive semantic functions. 



Theorem 1. For any L, 

1- *l(/2 o /i) = (*l/2) o (*l/i) for any fi : D ^ E and f2.E^F, 
^- *l(/i, /2) = (*l/i,*l/2) for any fi : D ^ E and /2 : I? -^ F, 
3. *Lproji{{4ii, (j)2)) — 4>i for i = 1,2, (pi : L — > Di and (j)2 '■ L — > D2 where 
proji{{ci,C2)) = Ci for i = 1,2. 

Proof. Consider item (1) first. For any (j) Cz L — > D, *l(/2 ° /i)(0) ~ f2 ° fi° 

0-/20 (*l/i)(0) = (^l/2)((*l/i)(0)) = (*l/2) O K/i)(0). 

Now consider item (2). For any (f> d L — > D, *l(/i, /2)(0) — {fi,f2)°4' = 

(/l O (j), f2 O (j)) = {Xlpl.fl O-01,A-02-/2 oV'2)(0) = (*l/i,*l/2)(0)- 

Item (3) follows from definition of iTi and-kL-. D 



Let (L2, a2, -^21 72) be a Galois connection and / : L2 -^ L2 and /' : L 



1 



L\ the concrete and abstract semantic functions. The concrete and abstract 
domains L2 and L| can be parametrized by Li and l\ which are related to each 
other by a Galois connection (Li,ai,L5j7i)- The following theorem says that 
*L'f^ approximates *Lif if /" approximates /. Furthermore, if /* is the best 

approximation of / and {Li,ai, L\,^i) is a Galois insertion then *r«/' is the 
best approximation of •i^/. 

Theorem 2. Let {Li,ai, Li,ji) and {L2,a2, L2,j2) be Galois connections, f : 
L2 — > L2 and /' : Lj — ^ ^2- ^^^ '^ '^'^'^ 7 be defined as in Proposition[J\ Then 

1. //a2 0/072 C /', ao {kLxf) 07 !^ ^l}/"- 

2. //a2 o /072 = /** and (Li, ai,Lj,7i) is a Galois insertion, ao {*Lif) oj — 

*l;/«- 



Proof. Consider (1) first. Let (j> be an arbitrary member of L\ — > Lj • 

(ao(*Li/)o7)(</') =a((*Li/)(7(0))) hy def. of -f 

= a((*Li/)(72 o^oai)) bydefof-k^J 

— ct(/ o "/2 o (p o ai) by def. of a 

= a2 ° / ° 72 ° ° <3i o 7i since a2 ° / ° 72 E / 
C /' o o ai o 7]^ since ai o ji is reductive 

E/»o0 bydefof*^»fi 

Hence, a o [-k]^^ /) o 7 E -k^t /" • 

Now consider (2). When Q!2 o /072 = /" o.nd qi 071 is the identity function, 
C becomes = in the proof for (1). D 

The following result states that performing the parametric analysis with a 
parametrized input and then binding the parameters to abstract properties yields 
the same result as the base analysis performed with the instantiation of the input 
with the same binding. 

Theorem 3. Let f : D — > D and k : L — > D. Then, for any £ G L, 

ifp«(,) / - (ifp« {*Lf)m 

Proof (Ifp, K/))W = i\Jf3i*LfY'H'^)m = (Uf^f^^^ ° «)W = Upif^^^ o 

Remark 1. In fact, any fixpoint of i^^f provides a set of fixpoints of /. Let 
/ : D — > D and k, : L — > D such that k — {-kLf){K). Then, for any £ G L, 

lfp,(,) / = K{t) Since f{K{t)) = / o K(l) - ((*i/)(Ac))W = Kit). 

4 Parametrizing Groundness Analysis 

In logic programming, a value is a term that may contain variables. In any pro- 
gram state during the execution of a logic program, logic variables are bound 
to terms that may be in turn bound to other terms later during execution. A 
variable is ground in a substitution (program state) if the substitution maps 
the variable to a term that does not contain any variable. Groundness analysis 
is one of the most studied properties for logic programs |2I5I6I11I23I24] . This 
section present a parametric groundness analysis by parametrizing the ground- 
ness analysis using positive propositional formulas with the simplest groundness 
domain. 

4.1 Propositonal Formulas 

Let [7 be a finite set of propositional variables. A propositonal formula over 
U is formed of propositional constants and 1, propositional variables from U 



and logical connectives A, V, O and -i. Other connectives such as — > and •;— 
can be defined using these connectives. Let Bool = {0, 1} ordered by < 1. A 
truth substitution m on domain C/ is a partial function from U to Bool. The 
application of m to / is denoted m(f). Let m — {x >-^ 1} and f — {x ^f y). 
Then m[f) = (1 — ;■ y). If a truth substitution m is defined for every propositional 
variables in a propositional formula / then m is called a truth assignment for /. 
Given a formula / and a truth assignment m, m \= f means that m satisfies / 
and /i \= J2 means that m |= /i implies m, [= ]i for every truth assignment m for 
/i- Two formulas /i and /2 are equivalent, denoted /i = ji if both /i \= ji and 
/2 1= /i- We shall not distinguish between elements in an equivalence class of =. 
A propositional formula / is positive if u |= / for each such truth substitution 
u that assigns 1 to all the propositional variables in /. 



4.2 Groundness analysis 

Marriott and Sondergaard (23] proposed to use positive propositional formulas 
to capture groundness dependencies between variables in a program state. Let 
x,y e V . Then the formula x describes those program states in which x is bound 
to a ground term while x ^f y describes those program states in which y is ground 
whenever x is. Let Vosv denotes the set of positive propositional formulas over 
propositional variables in V . Then {Vosv, ^) is a complete lattice with bottom 
AV, top 1, meet A and join V. Let groundy be defined groundv{d) — Xx £ 
V.[Y{e{x)) = 0) and 

avos^ie) - V 3-v. f\ (x^ AV(0(a;))) 

lvos.{f)^{e\{groundv{e)^f} 

Then {p{Substv),aT:>osvi'Posv t^Vosv) is a Galois insertion [5]. Thus, the least 
upper bound V on {Vosv, ^) approximates correctly U on {p{Substv), ^). The 
other abstract operations for groundness analysis are given as follows. The ab- 
stract projection operation t:\- : Vosy i— >■ Vosyxx is T^xif) ~ ^Xi3x2- ■ ■ ■ ^Xn-f 
when X = {xi,X2,- ■ ■ ,Xn}', the abstract unification operation 0" : Vosjj x 
Vosv ^ VosuDY is fu o" fv — fu ^ fv and the abstract renaming operation 
Ti-x^y ■ Vosv ^^ 'Posv\xuy is defined Ti-x^yif) = /' where /' is obtained by 
simultaneously replacing the elements of x with their corresponding elements 
in y. For instance, '^lij;2^j:2;r^(a;i -^ X2) = {x2 — >■ xi). The soundness of these 
operations are well established (see, e.g. |i2!). 



4.3 Abstract domain Qp 

Jones and Sondergaard [T7] proposed an abstract domain that capture ground- 
ness information in a substitution in terms of the collection of the variables 
that are grounded by the substitution. Let P be the set of variables of interest. 



The above abstract domain is isomorphic to the set of conjunctive propositional 
formulae with propositional variables from P 

Gp = {AX \X C¥} 

ordered by logical implication |=. The partial order (Qp, \=) is a complete lattice 
with bottom AP, top 1, meet A and join V where /i V/2 = A{/ \ fi \= f and /2 |= 
/}. The abstraction and concretization functions are 

ag,{0) ^A{x\xeP and \/9 e e.{V{9{x)) = 0)} 
7e,(AX) = {9 I V.T e X.{V{9{x)) = 0)} 

{p{Substp),agf,Gp,jgf) is a Galois insertion. 



4.4 Parametrizing Groundness Analysis 

A parametric analysis informs about how the abstract property at a program 
point depends on that at an initial program point. The parametric groundness 
analysis is obtained by parametrizing the abstract interpretation for groundness 
analysis with the groundness domain Qp where P is the set of groundness pa- 
rameters for the variables at the initial program point. The primitive abstract 
domains for the parametric analysis is thus Gp '-^ Vosjj where U € U. The fol- 
lowing abstract operations for the parametric analysis are lifted from those for 
the non-parametric groundness analysis. We shall drop the subscript in -kg^. By 
definition [l] 

0i(*A)(/)2 = Xg-iMg) A Mg)) 

5 Encoding Parametric Groundness Analysis 

In this section, we encode monotone functions in Gp "^ Vosjj as positive propo- 
sitional formulas in Vosu\jp- A monotone function is encoded as a formula 
V((?!)). This encoding enables us to encode abstract operations on Gp ^^ Vosjj in 
a straightforward manner. It turns out that the encoding of an abstract operation 
on Gp ^-^ Posjj is exactly the corresponding operation on Vosuijr- 

Encoding of abstract properties Let g G Gp- Then models of g are closed under 
conjunction, that is, Mi \= g and A/2 ^ g implies {Mi A M2) \= g ^- Thus, g 
has a minimum model which is the conjunction of all its models. The minimum 
model of 5 is denoted MMp{g). 

MMv{g) = Ax e P. /\{m{x) | m £ (P h^ Bool) and (m |= g)} 



Let BFp{m) be the prepositional formula over propositions in P that has m as 
its minimal model. The formula is unique modulo logical equivalence. 



BFp{m) 



yueP,m{u) = l 



A -" 

^ueP.,rn(u)=0 



For instance _B_F{„j ^^id^^i ^ 1,U2 ^-> 0}) = ui A ^U2- 

Example 1. Let P = {a}. Then Gr = {a, 1}. MMp(l) = {a h^ 0} and MAfp(a) = 
{a H^ 1}. Thus, Bi^p(MMp(l)) = -.a and BFp{MMp{a)) = a. 

A function (/> from Cjp to Vosjj is represented as a formula in Pospuc/ via an 
embedding function V defined as follows. 

V{4>) = \J BFp{MMr{g)) A <i>{g) 
g&Qv 

Example 2. Let P = {a} and U = {u} Then Qp = {a, 1} and Vosu = {u, 1}. 
There are four functions from Qr to Vosjj'- 01 = {a i— > 1, 1 h-> 1}, 02 = {a i— >■ 
u, 1 h-> 1}, 03 = {a ^^ u, 1 h-^ u} and 04 = {a i-> 1, 1 M> u}. The first three 
functions are monotone and the last one is not. The embedding of the three 
monotone functions are as follows. 



V(0i)-1 

V(02) = (aAu) V {{^a) A 1) 

V(03) = U 



[a 



Applying V to 04, we obtain V(04) = a V m. The following diagram shows 
Vospyju and encoding of monotone functions Qv — > Vosjj via V. 



u -Yia 




There are positive prepositional formulas in Vospuu such as V(04) that are not 
images of monotone functions in Gp — > Vosu under V. These formulas are not 
used in the parametric analysis. 

Lemma 1. V is monotone and 1-1. 

Proof. That V is monotone follows from its definition straightforwardly. We 
now prove that V is 1-1. Let 0i ^ 4>2- Then there is g such that 0i(g) ^ 4'2{g) 



implying there is a truth assignment m : U t-^ Bool such that m{(j}i{g)) ^ 
m{(j}2{g))- Construct a truth assignment m! : P U C/ ^ Bool as follows. 

^, (MMr{g)iy) tfyeV 

\ m{y) otherwise 

Then m'{\I{(j}i)) — m'((j)i{g)) = m((j)i{g)) since (t>i{g) does not contain any 
propositional variable in P. Similarly, ?tt,'(V(02)) = "^'(02(5)) = fTi{4'2{9))- 
Thus, V{(j)i) ^ V(02). □ 

Decoding abstract properties and instantiating analysis Since V is 1-1, its inverse 
exists. Define V^^(ft-) = Xg.MMp{g)(h). The following lemma proves that V~^ 
is the inverse of V. 

Lemma 2. V^"'^(V((/))) = (f) for any function in Qp — > Vosu ■ 

Proof. Note that MMp{g){BFp{MMp{g'))) = for any g' ^ g. Hence, (V^^ o 
V(0))(g) = MMp{g){Vm - (f>{g). D 

Instantiating an analysis result V((/)) for a given input g amounts to calculating 
(j){g) which, according to the above proof, amounts to calculating MMp{g){\/{(j))). 
Thus, instantiating an analysis result for a given input g does not requires a com- 
plete decoding. 

Encoding Analysis Input Let V be the set of variables in the initial goal. The 
parametric analysis can be performed with any monotone function Qp — > Vosy 
as input. A more natural input associates each variable in V with a different 
parameter since it allows the influence of the groundness of the variables in the 
initial goal on groundness dependencies at other program points to be observed. 
The following shows that the input has a natural encoding. Define BMp{X) = 
BFp{MMp{f\X)) for any X C P. 

Theorem 4. Let \V\ = \¥'\ , p : f ^^ V an invertible function and i : Qp >—^ Vosy 
defined i{/\ X) = /\{p{x) \ x £ X}. Then \/{i) = Aaep(" ^ P(a))- 

Proof. The proof is by induction on |P|. 

Basis . The thesis holds vacuously for the case |P| = 0. 
Induction . Assume that thesis holds for all P such that jP| = n. Assume that |P'| = 
n -|- 1. There are a and P such that P' = P U {a} and a ^ P. 

V(t)= \J BFp,iMMp>{g))ALig) 

geGr' 

= y BMp,{X)Al{/\X) 

xep(P') 

= \J BMp,{X)Al{/\X)\' y BMp,{XU{a})AL{aA/\X) 
xep(P) xep(P) 



= (-a)A y BMp{X)AL{/\X)\/aAp{a) \/ BMp{X) A l{/\X) 

xep(p) xep(p) 

= {a^p{a))A y BMr{X)AL{/\X) 
xep(r) 

= (a — > p{a)) A A (/? — > p(/3)) by the induction hypothesis 

/3eP 

Hence the thesis holds for P'. D 

Example 3. Let U — {xi,X2} and P = {q!i,q:2}. The encoding of the monotone 
function {ai ^^ x\, a2 i— > X2^ 0:10:2 i— > xi A a;2, 1 ^-> 1} is (oi -^ xi) A (02 — !► X2). 

Encoding abstract operations The encoding V allows us to use the same set 
of the operations for both non-parametric and parametric groundness analyses, 
which is formally stated in the following theorem. The theorem also states that 
V(^p I— > Vosx) is closed under all the analysis operations. 

Theorem 5. Let P fee a set of parameters, U,V £ U, x and y be vectors of 
variables such that \x\ = \y\. Then 

1. V(0i(*A)<?!)2) ^V{(t>i)AV{(t>2)forany(t)i G [Gr -^ Vosu) and 4)2 G {Qv ^ 
Vosv); 

2. V(</)i(W)</)2) = V(</>i) V V{4>2) for any 0i,02 e [Gr ^ Vosu); 

3. V(*7r*^(</))) = 7r^(V(</.)) for any (j) £ (Gv ^ Vosu) and any X C U; 
I V(*7^i^^(0)) = ni^yiVm for any <t> £ {Gr ^ Vosu). 

Proof. Consider (1) first. Note that BMp{X) A BMp{Y) = when X ^Y . 

V(0i)AV(02)-( V SMp(X)A0i(/\X))A( V BMr{Y)A4>2{f\Y)) 

xep(v) Yep(v) 

\J BMpiX)ABMp{Y)AM/\X)AM/\Y) 

xep{r),Y£p(r) 

= V bmp{x)aM/\x)amA^) 

xep(P) 

= V{Xg.M9)^M9)) 
= V(</.i(*A)(/)2) 

The proof of (2) is similar. (3) and (4) are straightforward. D 

The following theorem shows that encoding of a monotone function (j) is 
logically equivalent to AgGe,(5 "^ ^(d))- 



Theorem 6. For any P, V such that P n F = 0, 

V0 e Sp t^ T'osy. V BMp{X)A4>{/\X)= f\ {f\X ^ ^{f\X)) 

\xep{P) xep(P) 

(1) 

Proof. The proof is done by induction on cardinality off. 

Basis. |P| = and hence P = 0. Then p(P) = {0}. Thus, Vxep(P) ^^p(^) -^ 
0(AX)=i?A/0(0)A(A0) = 0(l). We also have ^^^^^r^{^X^<|y{^X)) = 
/\ — ?> (/>(/\ 0) — 0(1). Hence, forniula[l\ holds for the base case. 
Induction. Assume that formula{li holds for any P such that |P| = n and P n V^ = 0. 
Let P' = P U {z} where z ^¥ is an arbitrary variable and </> be an arbitrary 
monotone in Qp, M> Vosy Then |P'| = n+1. Note that p(P') = p(P)U{y U 
{z} I r e p(P)}. Then 

/\ (/\X->0(/\X)) 

xep(P') 

/\ (/\x^0(/\x))] A [ /\ (zA/\r^0(zA/\r)) 
/\ (/\x^0(/\x))] A l^zv /\ (/\y^0(zA/\y)) 

^-^ep(P) / \ Yep(P) 

/\ (/\x^0(/\x))) A (-ZV /\ (A>^^'^'(A^)) 

V-^ep(P) / \ yep(P) 

where (f)' {f\Y) = 0(z A A^) for all Y e p(P). Since (j> e Gv i^ Vosy and 
z ^ P, both G ^p I— > T^osy flTid </)' G 5p t-> Vosy . By applying the induction 
hypothesis twice, we have 

f\ {f\X^cp{f\X)) 

xep(P') 

= ( V BMp{X)A(b{/\X)) A (-zV V (BMp(r)A0'(/\r))) 

xep(P) i-eplP) 

Vx6p(p)(-^ASAfp(X)A0(A^)) 

V 

^ Vxep(p).yep(P)(^^^p(^) A i3Mp(r) A 0(A^) A 0'(A F))^ 

5'mce z ^ P, -.z A BMp{X) = BAfpu{z}(X) = BAfp/(X) /or any X £ p(P). 
Suppose X,Y Cz p(P) ariii X y^ y. T/ien there is a u G P smc/i i/iai ('i^ 
V & X\Y or (a) V G Y\X. Consider the case (i) and let Xy — X\ {v} and 



P„ = P\{v}. BMp(X)ABMp{Y) = -(V(P\^))AA^A-(V(F\r))AA i^ = 
-n{\/{F\X)) A /\Xy Av AA^v^{\/{Fy\Y)) A/\Y = 0. Similarly, BMp(X)A 
BMp{Y) ~ in the case (ii). By monotonicity of (j), 4>{/\X) A (j)'{/\X) = 
(f>{/\ X) A(f>{zAf\X) = (j){z A/\X) and (f>{/\ X) V(f){zAf\X) = 0(/\ X) for 
any X G p(P). Then, 

/\ (/\X^0(/\X)) 

xep(P') 

= V {BMp,{X)A4>{/\X))y \J {BMp{X)A^{/\X)A^'{/\X)) 

xep(p) xep(P) 

= \J {BMp,{X)Adp{l\X))\J \J {BMp{X)A(j,{zAl\X)) 

xep(P) xep(P) 

= \J {BMp,{X)Ad^{f\X))y \J i^zABMpiX)A^izA/\X)) 
xep(P) xep(P) 

V Y {zABMp{X)A(j}{zA/\X)) 

xep(V) 

= \J {BMr{X)Adp{f\X))y \J {BMp,{X)Adp{zAf\X)) 
XGp(P) xep(P) 

V V (BMp,{X\j{z})Ac^{f\(X\j{z}))) 

xep(V) 

= V {BMp,{X)A{<P{f\X)y<P{zAf\X))) 

XGp(P) 

V V {BMp,{X\j{z})Ac^{/\{X\j{z}))) 

XGp(P) 

= V {BMp,{X)A<P{/\X))y \J {BMp,{X^{z})Acj){/\(X\j{z}))) 

xep(p) xep(P) 

= V {BMp,{X)A<P(/\X)) 

XGp(P') 



6 Prototype Implementation 



We have implemented a logic program, analyzer in SICSTus Prolog and the 
CUDD package that can perform both parametric and non-parametric ground- 
ness analysis. The analyzer takes a text file as input that contains a Prolog 
program, a directive of the form :- main(Pred/Arity) specifying a top-level 
goal and a directive :- parametric (yes) if the parametric analysis is to be 
performed. 



6.1 Analysis Process 

The analyzer first does the magic transformation [12, on the source program and 
the top-level goal q{xi, • • • , a;„) that is constructed from the directive : -main(q/n) . 
For each predicate p/n in the source program, the transformed program con- 
tains two predicates call^p/n and ans4)/n such that success sets for call_p/n 
and ans-p/n are the set of calls to p and the set of successes of p in the source 
program during the execution of the top-level goal. In the second step, the ana- 
lyzer constructs a call-graph which captures dependencies between the clauses of 
the transformed program and computes strongly connected components (SCCs) 
of the call-graph. The third step normalizes the transformed program and then 
abstractly compiles yL5^ the normalized program by replacing each built-in with 
its success pattern. For instance, xi = x^ is replaced with xi <r^ x^. Then, the 
unit clause call-q{xi,- ■ ■ ,Xn) is added for the non-parametric analysis or the 
clause calLq(xi, • • • , Xn)--{f3i -^ xi) A • • • A (/3„ — > x„) is added otherwise. Then 
the success pattern of the abstract program is computed according to the SCCs 
which yields call and success patterns for the source program and the top level 
goal. Note that SCCs are computed before abstract compilation. This is because 
abstract compilation incurs loss of concrete information, which may result in 
more dependencies between clauses. 

Consider the reverse program with top-level goal r{xi,X2)- Suppose that we 
want to perform the parametric analysis. Then the text file contains. 



:- main{r/2). 

:- parametric{yes) . 

r([a;i|a;2],X3) :- r{x2,X4:),a{x4, [a;i],a;3). 
a{[],x,x). 
a{[xi\x2],X3, [xi\x4]) :- a(x2, 2:3, X4). 



(2) 
(3) 
(4) 
(5) 
(6) 
(7) 



The following is the abstract program that is obtained where xy abbreviates 

X Ay. 



calljr{xi,X2) 
ans_r(xi, X2) 
calljr{xi,xz) 
calLa{x5, xq,X2) 
ansjr{xi,X2) 

ans-a{xi,X2,X3) 
calLa{x5,X2jXe) 
ans-a{xi,X2,X3) 



i^i^xi) A (132^X2). (8) 

call-r{xi, X2),xiX2- (9) 

calljr{xi,X2),{xi <r^ X3X4). (10) 
calljr{xi, X2), (xi f-> X'^xa), ans_r (2:4, X5), [xq O a;3).(ll) 
call-r{xi,X2), {xi O a;3a:;4), ansjr{xA,xz), 

{xe -ir^ X3),ans-a{x5,xe,X2)- (12) 

callja{xi,X2, X3), x\ A {x2 <-> 2:3). (13) 

callja{xi,X2, X3), (xi O 2:40:5) A (2:3 4-> 2:42:6) (14) 
callji{xi,X2, 2:3), (2:1 -O- 2:42:5) A (2:3 O 2:42:5), 

0715-0(2:5,2:2,2:6). (15) 



Each clause in the abstract program is derived from the input file. The clause 
8 results from the clauses 2 and 3, the clause 9 from the clause 4, the clauses 
10,11 and 12 from the clause 5, the clauses 13 from the clause 6 and the clauses 
14 and 15 from the clause 7. The SCCs are {8}, {9}, {10} and {11, 12, 13, 14, 15} 
with the latter SCCs depending only on the earlier ones. After evaluating the 
abstract program, we obtain 



call_a{xi, X2, X3) 

ans_a(xi,X2,X3) 

calLr{xi,x2) 

ans_r (xi,X2) 



(^1 -> 2:1X2) 

(/3i -> X1X2) A (x3 ^ X1X2) 

(A -^a;i) 

{xi ^ X2) A ((A V 132) -^ X1X2) 



The call pattern for r/2 states that r/2 is (recursively) called with the first 
argument being a ground term if the first argument of the top-level goal is 
ground (/3i = 1). There is no similar relationship between the second argument 
of a recursive call to r/2 with the second argument of the top-level goal. This 
is precise since r/2 is recursively called with its second argument being a fresh 
variable in the second clause for r/2. The success pattern for r(a;i,X2) has two 
parts. The first part xi O X2 is what a goal independent analysis infers and it 
states that upon success, xi is ground iff X2 is. The second part captures the 
effect of the groundness parameters on the groundness of the arguments of the 
calls. It states that both xi and X2 are ground if either argument of the top level 
goal is ground. 

6.2 An Example 

The following is the quicksort program plus analysis directives. The first directive 
indicates the top-level goal qs{xi,X2) and the second the parametric analysis. 
Thus, the input abstract property is (/3i — >■ xi) A {P2 ^^ 2:2). 

: - main(qs/2) . 

:- parametric (yes) . 

app([],L,L). 

app([X|Ll] ,L2, [X|L3]) :- app(Ll ,L2,L3) . 

pt([X|T] ,P, [X|B] ,A) :-leq(X,P), pt(T,P,B,A). 
pt([X|T],P,B,[X|A]) :- gt(X,P), pt(T,P,B,A). 
pt( [],_,[],[]). 

leq(X,Y) :- X =< Y. 
gt(X,Y) :- X > Y. 

qs( [],[]). 

qs([X|Xs] ,Ys) :- pt(Xs,X,U,V) , qs(U,S), qs(V,L), app(S, [X |L] ,Ys) . 

The predicates leq/2 and gt/2 have been added to observe the effect of 
groundness parameters on their arguments. The following is the analysis result 



that has been converted manually to more readable form. 



call-gt(xi,X2) 

ans-gt{xi,X2) 

callJeq{xi,X2) 

ansJeq{xi, X2) 

Call_pt{xi, X2, 2^3, X4) 

ans4)t{xi, 2:2, ^3, x^) 

calljis{xi,X2) 

ans_qs{xi,X2) 

calljipp{xi,X2, x^) 

ans-app{xi,X2, x^) 



:- Pi -> X1X2 (16) 

:- a;iX2 (17) 

:- Pi -^ X1X2 (18) 

:- xia;2 (19) 

:- A ^ a;ia;2 (20) 

:- {j3i-)-X2) AX1X3X4 (21) 

:- (/3i -^ xi) A (132 -^ {xi V 2:2)) (22) 

:- {xi O 2:2) A ((/3i V /?2) ^ a;i2;2) (23) 

:- xi A (/3i ^ 2:2) A (/32 ^ (2:2 V 2:3)) (24) 

:- xi A (2:2 O X3) A ((/3i V /32) -> 2)22:3) (25) 

The analysis result gives call and success patterns during the execution of 
the top-level goal gs(2;i,2;2) using ^1 for the groundness of xi at the beginning 
of the execution and /32 for that of X2 ■ By assigning 1 to f3i in the righthand side 
of Eq. [161 we obtain 2;ia;2, implying that gt/2 (hence > /2) is always called with 
ground arguments if the first argument of the top-level goal is ground. Eq [17] 
indicates gt/2 (and > /2) always instantiates its arguments to ground terms. Call 
and success patterns for leq/2 are the same as those for gt/2. This illustrates 
that the parametric analysis allows us to infer a sufficient groundness condition 
on the top-level goal for the execution of the program to avoid instantiation 
errors [18] . Eq. [20] indicates that if the first argument of the top-level goal is 
ground (/3i — 1) then pt{xi,X2,X3,X4/) is always called with both xi and X2 
being ground. Eq [21] says that upon success, pi(2;i,2:2,a;3,a;4) binds xi,X3 and 
X4 to ground terms and it binds X2 to a ground term if /3i = 1. Observe that 2:2 
may be any term when xi, X3 and 2:4 are all empty lists. 

The call pattern in Eq. [22] says that qs{xi,X2) is called with xi ground if 
/3i = 1 and that either xi or 2:2 is ground if /?2 — 1- The success pattern for 
gs(2;i,2;2) in Eq. [23] states that xi is ground iff 2:2 is ground and that both xi 
and 2:2 are ground if either /3i or /32 is ground. From Eq. 1241 we can infer that 
when app{xi,X2,X3) is called, xi is always ground, and X2 is ground if /3i = 1, 
and at least one of 2:2 and X3 is ground if /32 = 1- From Eq. [25] one can deduce 
that upon success of 0^^(2:1,2:2, 2:3), xi is always ground, 2:2 is ground iff X3 is 
ground, and both X2 and 2:3 are ground if either /3i or /32 is 1. 

6.3 Performance 

The analyzer has been tested with a suite of benchmark programs. The exper- 
iments were done on a 2.33GHz Intel (R) Xeon (R) CPU running Linux 2.6.24 
and SICSTUS Prolog 4.0.3. The CUDD package version is 2.4.1. 

Table [T] shows data from the experiment. All but the last row corresponds 
to a benchmark program. The first column contains the name of the program 
and the second specifies the top level goal. In the third column is the number 



Program 


Top-Level 


Size 


Para 


Non-Para 


Ratio 


annl 


go/1 


1570 


273.68 


271.57 


1.00 


asm 


asm_PIL/2 


3589 


757.89 


754.73 


1.00 


boyer 


tautology/1 


725 


63.68 


65.78 


0.96 


cs_r 


pgenconfig/1 


1101 


146.31 


140.52 


1.04 


disj_r 


top/1 


682 


60.52 


57.36 


1.05 


dnf 


dnf/2 


358 


29.47 


33.15 


0.88 


ga 


test_ga/2 


1349 


176.31 


166.84 


1.05 


gabriel 


main/2 


377 


23.15 


23.15 


1.00 


kalah 


play/2 


855 


74.73 


76.31 


0.97 


life 


life/4 


272 


15.26 


13.68 


1.11 


met a 


interpret/ 1 


201 


14.73 


11.05 


1.33 


nandc 


play/1 


486 


32.10 


31.05 


1.03 


nbody 


go/2 


1431 


125.78 


120.00 


1.04 


neural 


test/2 


755 


69.47 


70.00 


0.99 


peep 


comppeepopt/3 


1435 


180.52 


176.84 


1.02 


press 


test_press/2 


1303 


241.57 


232.10 


1.04 


read 


read/2 


1686 


281.05 


272.63 


1.03 


reducer 


try/2 


1063 


137.36 


123.68 


1.11 


roup 


puzzle/ 1 


340 


19.47 


18.42 


1.05 


sdda 


do_sdda/4 


788 


82.10 


84.73 


0.96 


semi 


go/2 


1351 


150.00 


149.47 


1.00 


simple_analyzer 


main/1 


1537 


242.63 


238.42 


1.01 


tictactoe 


play/1 


474 


34.73 


32.10 


1.08 


tsp 


tsp/5 


391 


30.52 


25.78 


1.18 


zebra 


zcbra/7 


259 


18.42 


10.52 


1.75 


Total 




24378 


3281.57 


3199.99 


1.02 



Table 1. Performance Comparison between Parametric and Non-Parametric 
Analyses 



of atoms in the abstract program. The fourth column is the time in millisec- 
ond spent on the parametric analysis using {/Si — > xi) A • • • A (/3„ — > a;„) as 
the input abstract property. The fifth column contains the time spent on the 
non-parametric analysis which is performed without any input groundness in- 
formation. The last column contains the ratio of the fourth over the fifth. The 
last row gives the total size, total times and the average ratio. 

The table indicates that the prototype parametric groundness analyzer spends 
an average of 0.135 seconds to process one thousand atoms in the abstract pro- 
gram. This is an acceptable speed for most logic programs. The table shows that 
the time the parametric analysis takes is from 0.88 to 1.75 times that the non- 
parametric analysis takes with an average of 1.02. This indicates that extra cost 
is negligible for performing the parametric analysis which yields more general 
results, which is quite surprising and promising. 



7 Related Work 

The approach proposed in section [3] for parametrizing a base analysis hfts each 
primitive abstract domain of the base analysis to its cardinal power with an 
exponent over which parameters range. The cardinal power belongs to the stan- 
dard Cousot and Cousot's abstract interpretation theory and was proposed 
in [5] to capture dependencies between abstract properties of a concrete en- 
tity [14]. Let {D,aE,E^,jE) and {D,aB,B^,jB) be a Galois connection. Then 
{D,a,E^ -^ B^,j) is a Galois connection where a = Ad.Ae.(a_B(d n^i 7_E(e)) 
and 7 is that induced by a. The cardinal power domain in and the relative 
reduced power domain in |13) are refinements of the base domain. In contrast, we 
use cardinal power to capture dependency of analysis output on analysis input. 

Parametric analysis abounds in literature. The following are a few exam- 
ples. Chatterjee et. al. present a point-to analysis for typed object oriented lan- 
guages [3] . This analysis computes a summary function for each method that ex- 
presses the effect of the method on the points-to solution. The summary function 
is parametrized by symbolic unknown initial values and conditions on these val- 
ues. The actual-formal bindings are accounted for when points-to information is 
propagated into a method from its callers. Liang and Harrod uses symbolic names 
for memory locations whose addresses may be passed into a procedure [21] . These 
symbolic names are then used in point-to graphs which expresses parametrized 
summary information for a procedure. The summary information can then be 
instantiated at specific call sites by binding the symbolic names. The escape 
analysis by Blanchet [3] is a combination of forward and backward analysis. 
The backward analysis computes escape information for method arguments as a 
function of the escape information for method result. These bespoken analyses 
were not designed by parametrizing a base analysis. Abstract properties in these 
analyses are functions over parameters; thus it is interesting to study whether 
and how they can be designed by parametrizing a base analysis. 

In [22] is a groundness analysis of logic programs that is also parametrized 
by a number of groundness parameters. The analysis is designed from Jones and 
Sondergaard's analysis by lazily evaluating operations on groundness parame- 
ters. However, it does not capture groundness dependencies precisely between 
variables in the program compared with the parametric groundness analysis pre- 
sented in this paper. Moreover, the extra cost of performing that analysis over 
the corresponding non-parametric analysis is 78% which is significant. 

This paper shows by an example that inference of sufficient groundness con- 
dition for error free execution can be done with a traditional top down forward 
analysis framework. One benefit that comes with a top down analysis is that 
analysis can be made more precise because of availability of a top level goal. 
In [T5] , a backward analysis is presented to infer sufficient groundness condition 
for error free execution. This is no coincidence since information derived by a 
forward analysis can be derived by a backward analysis and vice versus [7119] . 

7-" OS- based goal- independent groundness analysis enjoys the property of being 
condensing [16120123] . An analysis F that infers output information F{<l)) from 
input information </> is condensing if F{(j)r\ip) — F((j)) Flip for any and ^. Thus, 



a condensing analysis can be performed with partial input information (p and its 
output be conjoined with additional input information ip to obtain the output 
that would result from analyzing the program with complete input information 
(j)r\ Tp. Condensing has been studied exclusively for goal independent analysis. 
Condensing can be used to retrieve abstract answers but does not precisely keep 
track of dependencies between a top level call and a descendant call because the 
projection operator discards useful information that is essential for maintaining 
such dependencies. 

Example 4- Consider the quicksort program in Section 16.21 A non-parametric 
Pos-based goal dependent analysis infers call-app{yi,y2,y3):-yi from analysis 
input call-qs{xi, X2)--true and it infers call_app{yi,y2,y3)'-yi A 2/2 from analysis 
input calljjs{xi,X2)'--xi. The second call pattern yi A y2 for app/3 cannot be 
obtained as the conjunction of the call pattern xi for qs{xi^X2) in the second 
analysis input and the first call pattern yi for app/3. 

8 Conclusion 

We have proposed an approach to parametrizing a base analysis by lifting its 
primitive abstract domains to their cardinal powers and obtained a parametric 
groundness analysis for logic programs using this approach. We have also used 
positive propositional formulas to encode abstract properties and presented ex- 
perimental results on a suite of benchmark programs. The experiments show that 
the parametric groundness analysis is as fast as the non-parametric groundness 
analysis from which it is obtained. 
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